HeXeЯ » SQL http://blog.hexnet.biz [ Spam 3.0 ] Sat, 03 Apr 2010 22:55:53 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 MySQL query that find duplicates… http://blog.hexnet.biz/2009/04/07/mysql-query-that-find-duplicates/ http://blog.hexnet.biz/2009/04/07/mysql-query-that-find-duplicates/#comments Tue, 07 Apr 2009 10:07:32 +0000 HeXeR http://blog.hexnet.biz/?p=226 SELECT `url`, count(*) as `n`
FROM `table_name`
GROUP BY `url`
HAVING `n` > 1
ORDER BY `n` DESC

Grin

]]> http://blog.hexnet.biz/2009/04/07/mysql-query-that-find-duplicates/feed/ 0 SQL http://blog.hexnet.biz/2008/05/01/sql/ http://blog.hexnet.biz/2008/05/01/sql/#comments Thu, 01 May 2008 18:25:19 +0000 HeXeR http://www.hexnet.biz/blog/?p=134 %2527 trick …
No. zakaj gre pri %2527 Triku ? Če imamo kakšno preverjanje tega kar nam pošlje uporabnik (POST, GET, ..) in iščemo enojni narekovaj, lahko s tem v določenih primerih “pridemo mimo”.

Če spustimo skozi, urldecode za string %2527 dobimo %27 in če gre urldecode še enkrat skozi dobimo enojni narekovaj, dalje pa vemo kako in kaj … Smile .

Še nekaj povezav …
sql injection by Rsnake
sql injection by Justin Shattuck
sql injection by …
MySQL cheat sheets

in pa …
mysql_real_escape_string
mysql-inputoutput-validation

]]> http://blog.hexnet.biz/2008/05/01/sql/feed/ 0